Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
File:                     7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft (raw, json)
Hash identifier:          G/kqOmKXufQmEvj8N0+ghxNlbg2QWxwh894jscHcGOc=
Subject key identifier:   10:93:93:C9:3C:E1:1D:B8:A3:44:4B:31:CE:E1:BE:51:26:C4:78:50
Authority key identifier: EE:0B:D0:EA:95:A1:90:C7:03:A8:5E:09:EB:C5:E5:FD:A5:CD:CE:32
Certificate issuer:       /CN=ee0bd0ea95a190c703a85e09ebc5e5fda5cdce32
Certificate serial:       019759EE729714DCF1325A7E8C32A9B304A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
Manifest number:          1589
Signing time:             Tue 10 Jun 2025 13:01:28 +0000
Manifest this update:     Tue 10 Jun 2025 13:01:28 +0000
Manifest next update:     Wed 11 Jun 2025 13:01:28 +0000
Files and hashes:         1: 7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl (hash: g9UKFNUVWU/T8kYrFSByTe+/gM3UCZIOPA/9x9D80ag=)
                          2: DPoR4kUwvFP364mIcuQBwqN8-tI.roa (hash: J6AqobDr9MA8WdK/mv+gGWZFgHJa5YpnU/YQyBKG/no=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 13:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:ee:72:97:14:dc:f1:32:5a:7e:8c:32:a9:b3:04:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee0bd0ea95a190c703a85e09ebc5e5fda5cdce32
        Validity
            Not Before: Jun 10 13:01:28 2025 GMT
            Not After : Jun 11 13:01:28 2025 GMT
        Subject: CN=109393c93ce11db8a3444b31cee1be5126c47850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:26:4b:7a:87:84:d4:78:3f:bf:ab:87:ab:7b:
                    2c:57:05:1d:8d:b9:02:9f:d5:29:94:9e:c0:e7:0b:
                    37:c6:f4:5b:78:8d:3e:8c:ee:75:64:ae:1e:ab:9e:
                    e3:78:40:55:eb:ec:f1:36:e1:02:f1:81:44:4a:ec:
                    7f:f9:79:c3:57:d3:4b:f8:e1:30:d6:cd:5f:ce:ba:
                    a8:b5:87:ee:0b:5d:36:3a:82:4a:53:6e:b7:0c:0c:
                    da:e2:38:12:f6:9a:12:47:5d:ff:c0:6e:6b:ee:e2:
                    8f:ca:f1:94:1e:9f:61:a7:bf:54:15:f8:75:11:2d:
                    21:6b:6d:9a:16:9f:5e:6f:57:e3:be:0a:94:c1:19:
                    ec:4e:8d:5f:b0:14:29:69:61:2a:df:c2:a9:06:d5:
                    46:35:29:3c:b0:f1:0d:c6:45:80:3a:9c:fa:02:b0:
                    d1:eb:2f:26:6d:d0:21:24:1a:fc:46:f2:6b:c2:f2:
                    ea:41:d1:9e:78:73:a7:ab:9f:f0:57:66:9f:f1:4b:
                    38:7e:e3:a6:81:77:ec:e9:e7:fd:39:c9:99:a4:36:
                    49:1b:bd:4b:0a:4f:ce:8b:d3:3e:0c:8f:b4:fe:df:
                    f8:e6:fe:5d:71:49:63:43:d3:df:cd:cd:cd:50:a7:
                    35:63:d2:71:39:1d:99:cc:63:49:c7:0d:0e:44:e5:
                    1c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:93:93:C9:3C:E1:1D:B8:A3:44:4B:31:CE:E1:BE:51:26:C4:78:50
            X509v3 Authority Key Identifier:
                keyid:EE:0B:D0:EA:95:A1:90:C7:03:A8:5E:09:EB:C5:E5:FD:A5:CD:CE:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:03:ec:4b:33:b8:85:8f:9a:f9:e3:4a:eb:18:67:88:61:e6:
         8f:69:5f:bb:e0:93:79:b8:1b:4c:0c:ab:ba:b6:cc:88:3b:2c:
         9b:72:20:6c:04:59:96:09:8c:43:65:14:ad:38:13:3c:29:fe:
         80:72:39:ea:f7:e4:e3:54:10:79:6b:ea:5d:bf:3c:53:42:ed:
         e8:21:5c:50:68:e0:2a:88:18:dd:aa:1b:06:c3:c8:de:df:3b:
         58:0d:fe:33:97:af:e7:20:f0:3e:8b:2c:59:92:72:d1:1c:37:
         f5:09:c4:9a:c7:33:18:12:56:9f:cf:84:d7:d7:2a:de:09:89:
         72:ce:fa:6b:bd:e1:da:4d:b0:68:86:b6:8d:1f:bf:f6:bb:64:
         50:b4:dc:12:c2:8f:27:12:cd:3b:80:f1:41:a1:a9:7f:e8:7f:
         ac:29:76:87:07:85:d7:50:4c:79:85:73:86:e6:e2:a7:03:33:
         8b:39:c0:62:52:d1:e5:2a:a7:db:19:82:67:c6:bb:4c:d1:b2:
         79:db:a7:34:4a:e0:09:55:ad:85:0b:2c:bf:d9:1f:6f:65:b8:
         54:e6:d8:21:f7:93:41:da:df:c3:e9:23:cd:16:c0:42:4a:05:
         4f:29:ad:17:d4:65:92:0e:04:56:3e:12:5b:a3:19:3c:6c:6e:
         50:f3:90:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:29:03 2025 by rpki-client